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Description 

BACKGROUND OF THE INVENTION 

[0001] The invention relates lo a methcxi for effecting, s 
with an electronic paynnent nneans. a variable number 
of payments in one payment transaction. More in par- 
ticular, the invention relates to a method for effecting a 
payment transaction with an electronic payment means 
and a payment station, comprising the issuing by the to 
payment means to the payment station of at least a first 
payment value, payment values being representative 
for one or more payment units to be settled. Such a 
method is known, e.g. from European Patent Applica- 
tion EP-A-0,637.004. There are many types of payment is 
transactions In which a variable number of payment 
units must be transferred. Thus, In a telephone booth, 
for a single conversation in most cases several units, 
corresponding with metering pulses (so-called "ticks"), 
should be debited against a payment card. These units so 
are credited to the telephone set of the telephone booth. 
In the event of copiers, for a copying order a certain 
amount per page should be paid, with such amount be- 
ing capable of being debited against a payment card. 
Within a single transaction (telephone conversation or ss 
copying order), therefore, a debiting of the payment 
means (i.e., the payment card) and a crediting of a pay- 
ment station (telephone set or copier) must repeatedly 
take place. 

[0002] In the event of modern, protected payment 30 
means, such as so-called "smart cards" or "chip cards", 
a protocol Is applied to each debiting of the payment 
means (debit), in which the authenticity of the payment 
means and of the electronic money used is verified. An 
example of a verification schema using blind signatures 35 
Is disclosed in European Patent Application EP-A- 
0,518,365. Another scheme lo verify electronic money 
is disclosed in European Patent Application EP-A- 
0,507,669, where payment units are provided with ran- 
dom "sequence numbers". Verification of the electronic <o 
money is effected by checking received sequence num- 
bers against a list of issued sequence numbers. How- 
ever, this type of verification still allows the electronic 
money to be duplicated and to possibly be spent more 
than once. 4S 
[0003] A verification, however, for each payment unit 
(metering pulse or copying price per page) requires a 
certain processing time. In the event of, e.g., interna- 
tional telephone conversations, where the metering 
pulses (or ticks) follow each other rapidly the process- so 
ing of the payment units may give rise to problems and 
obstruct the execution of a protected payment. 
[0004] In order to solve this problem, prior to the ac- 
tual transaction several payment units might already be 
transferred from the payment means to the payment sta- ss 
tion. This has the drawback that restitution should take 
place In the event that not all payment units are used 
up. Payment afterwards, i.e., the transfer of payment 



values from the payment means to the payment station 
following the transaction, has the drawback that the pay- 
ment may be sabotaged by removing the payment 
means (I.e. the smart card) prematurely. 

SUMMARY OF THE INVENTION 

[0005] The object of the invention is to eliminate the 
above and other drawbacks of the prior art, and to pro- 
vide a method which enables the effecting of a protected 
payment in a simple and rapid manner with a variable 
number of payment units, i.e. a number of payment units 
to be determined during the transaction. 
[0006] Another object of the invention is to provide a 
method which allows a secure payment involving a min- 
imal amount of processing time. 
[0007] For this purpose, a method of the type referred 
to in the preamble Is characterised in that the payment 
values are mutually related by a one-way function, in 
such a manner that the first payment value may be ob- 
tained from a further payment value by repeatedly ap- 
plying the function. By applying a one-way function, i.e.. 
a function of which the inverse cannot vlably be deter- 
mined, a very suitable check on the progress of the pay- 
ment transaction may be obtained without the need to 
repeatedly execute a complicated and therefore time- 
consuming verification process. 
[0008] After receiving a payment value, the payment 
station preferably checks, by applying the function, 
whether the payment value received is correct. This is 
possible since repeated application of the functbn pro- 
duces the first payment value. 
[0009] After receiving a payment value Ihe payment 
station, by applying the function repeatedly, may addi- 
tionally determine how many payment units the pay- 
ment value received represents. Per payment transac- 
tion one or more payment values may be transferred, a 
(last) payment value possibly representing several (pre- 
vious) payment values. The number of times the func- 
tion must be applied to obtain the preceding or first pay- 
ment value, is directly related to the number of payment 
values generated, but does not have to be equal to the 
number of issued and thus transferred payment values. 
[0010] Together with at least the first payment value, 
authentication data is advantageously transferred from 
the payment means to the payment station. This authen- 
tication data, such as the Identification code of the pay- 
ment means and/or the user may be contained in the 
first payment value or precede it. 
[0011] In a further embodiment of the method accord- 
ing to the Invention, the payment station, after receiving 
a payment value, transfers a debit value to the payment 
means. The debit values may be used, directly after hav- 
ing been received by the payment means, for debiting 
a balance, e.g., by lowering a counter reading present 
in the payment means. It Is also possible, however, that 
after having been received by the payment means the 
debit values are collected and, at the end of the payment 



3 

transaction, are used for debiting a balance. In the latter 
case, the method may progress more rapidly. 
[0012] In yet a further embodiment of the method ac- 
cording to the Invention, together with the debit value a 
count value Is Iransfen^ed from the payment station to s 
the payment means, which count value represents the 
number of payment units to be debited. The count value 
may be one, but may also be greater than one, so that 
several payment units are debited simultaneously. The 
count value may furthermore have been detenmined In 
advance, or be variable. Preferably, the count value is 
related to the number of times the one-way function is 
applied, e.g. , to obtain the preceding or the first payment 
value. 

[0013] In a yet another embodiment of the method in 
accordance with the invention the issued payment val- 
ues are used as proof In a settlement process to be car- 
ried out later. In this case, with the issued payment value 
(s) a payment is laid down while the settlement of pay- 
ment can take place at another time. Such a settlement 
can for example result In a summary invoice. 
[001 4] The method according to the invention enables 
to adjust as needed, during the transaction, the number 
of payment values and thus the number of payment 
units to be settled. 

EXEMPLARY EMBODIMENTS 

[0015] The invention wilt be explained in greater detail 
below with reference to the Figures. 

Fig. 1 shows a smart card as nnay be used In the 
method of the present invention. 

Fig. 2 schematically shows the integrated circuit of 
the smart card of Fig. 1 . 

Fig. 3 schematically shows a preferred embodi- 
ment of the method according to the inven- 
tion. 

Fig. 4 schematically shows successive function 
values of a one-way function. 

[0016] The smart card or IC card 1 shown by way of 

example In Fig. 1 comprises a substrate 2, in which an 
integrated circuit is embedded. The integrated circuit is 
provided with contacts 3 for contacting a card reader or 
the like. It should be noted that the present Invention 
can also be applied in the case of so-called contactless 
smart cards. 

[0017] The integrated circuit 10 shown schematically 
and by way of example in Fig. 2 compnses a processor 
11, a memory 12 and an input/output circuit 13. The 
memory may comprise a volatile (RAM) memory part for 
temporarily storing data and a non-volatile (ROM) mem- 
ory part for permanently or semi-permanently storing 
data. The latter part is preferably an EEPROM type 
memory. The data stored in the non-volatile part may 
contain both programming data (instnjctions, programs) 
and payment data. I.e. data relating to monetary trans- 
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actions. It will be understood that a separate memory 
(not shown) may be provided to store the instruction set 
of the processor 11. The input-output circuit 13 may 
communicate with external devices via contacts (not 
shown in Fig. 2), such as the contacts 3 shown in Fig. 
1 . The Integrated circuit 10 may be contained in the card 
1 of Fig. 1 . 

[0018] In Fig. 3, there is schematically shown, by way 
of example, an embodiment of the method according to 
the invention. A payment means (paying party) is re- 
ferred to by I, and a payment station or terminal (receiv- 
ing party) is referred to by II. Between the payment 
means I and the payment station II, during a payment 
transaction an exchange of data takes place. It will be 
understood that the payment means (card) I may corre- 
spond with the smart card 1 shown in Fig. 1 . 
[0019] At the time to, there may take place an ex- 
change of initialisation values 1 (or Init). This exchange, 
which inter alia may relate to the identity of the payment 
station and/or the payment means, the type of transac- 
tion and the like, Is not essential to the present invention. 
[0020] At the time t,, the payment means (card) t 
sends an authentication value A and a first payment val- 
ue to the payment station (terminal) 11. The payment 
value may, like the debit value R, be contained in the 
authentication value A or may be determined by the au- 
thentication value A. e.g. when A is constituted by a dig- 
ital signature on p(^, R and other transaction data. The 
payment value need therefore not constitute a sep- 
arate value. 

[0021] After authentication, the payment station pro- 
vides access to the desired service or the desired prod- 
uct and saves the authentication value A and the pay- 
ment value piyi as proof of payment, e.g. vis-^-vis a 
banking institution. Alternatively, f^^ or one or more pos- 
sible subsequent values p^.^. Pf^.2, may sen/e as 
proof to later collect money from a consumer (compare 
so-called credit cards). In his context it should be noted 
that the settlement of the transaction is, in principle, in- 
dependent of the transaction proper and may be carried 
out at another time and another place. 
[0022] At the time t2, the payment station II sends a 
debit value R to the payment means, possibly accom- 
panied by a count value N. The count value N may have 
a previously determined fixed value, e.g., one. In this 
case, the transfer of the count value N may be dis- 
pensed with, or may be effected only once (time tg). 
[0023] On the basis of the debit value R, one or more 
payment units are debited against a balance on the 
card, e.g., by lowering a counter reading (see also e.g. 
EP-A-0,637,004). This number of payment units to be 
debited may be predetermined, or may be referred to by 
the count value N. Also the debit value R may be pre- 
determined, because of which R is redundant and may 
be dispensed with. Instead of R^, or R and N, a generic 
debit signal may be transferred. The debiting may take 
place directly or shortly after the time X2, or may be post- 
poned till the end of the transaction. In the latter case, 
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the payment means will be constructed in such a man- 
ner that this debiting takes place even if the transaction 
is prematurely Interrupted. 

[0024] As a reaction to the receipt of the debit value 
R. or as a reaction to the receipt of an interim request s 
(not shown in Fig. 3) from the payment station, at the 
time t3 the payment means I sends a further payment 
value, p^.<^, to the payment station II. In the payment 
station 1 1, A and p^^.^ are now saved as proof of payment. 
In addition, F(Pm.i) calculated; In other words, p^^.^ is 
subjected to the function F. If the result of this operation 
indeed produces |5^, not only has a check on the au- 
thenticity of p,^.i been effected, but the number of pay- 
ment values Is also determined: the total number of pay- 
ment values is equal to the number o1 operatbns re- 
quired to obtain plus one. It follows that in the event 
of receiving a payment value p^.^ the value ot x may be 
determined by applying the function F x times. Thus, the 
count value N may be adjusted on the basis of the value 
of X found. This will be explained later with reference to 
Fig. 4. 

[0025] At the time t4, a further debit value R is trans- 
ferred from the payment station 1 1 to the payment means 
I. possibly together with a count value N. The payment 
means carries out similar operations as at the time t2. 
[0026] After the time t4, further similar steps may be 
carried out, or the transaction may be terminated. The 
transaction will be terminated anyway after the last pay- 
ment value Po has been transferred. Possibly, an ac- 
knowledgement of the termination of the transaction 
may be transferred from the payment station II to the 
payment means I. This Is not further indicated in Fig. 3. 
[0027] As is explained above, the number of payment 
units to be debited is variable and may depend on the 
duration of the transaction, Inter alia. 
[0028] In summary, the method according to the In- 
vention, at any rate If use is made of debit values, com- 
prises the following steps: 

1 . The payment means sends a value p to the pay- 
ment station. 

2. The payment station sends a debit value to the 
payment means. 

3. The payment means sends a value of (P') derived 
from p, determined with the help of the one-way 
function, to the payment station. 

4. The payment station checks whether the re- 
ceived value p' is indeed a value derived from p. 

5. If the transaction has not been terminated, p is 
replaced by Its derived value P', and the process 
continues at step 2. 

The derived value referred to here is always the value 
p' for which: 

F(P') = p. I.e. the value "preceding" p. 
[0029] It should be noted that the method described 
above may also be terminated after step 2. that Is In case 
only one payment unit, such as a telephone tick (meter- 



ing pulse), is to be transferred. 
[0030] The payment values p referred to above may 
each represent one payment unit, such as a telephone 
tick, currency unit or calculation unit. It is also possible, 
however, that each payment value represents several 
payment units, or that different payment values repre- 
sent different numbers of payment units. This may be 
recorded in the authentication value A. The first pay- 
ment value may e.g. represent a base rate of several (e. 
g., two or three) payment units, while further payment 
values always represent one payment unit. In this man- 
ner, a differentiation may be made between, e.g.. the 
set-up costs and the duration costs of a telephone con- 
nection. The payment values consist of numbers which 
are transferred In the form of electrical, optical or acous- 
tical signals. 

[0031] The so-called one-way tunctlon F per se is sim- 
ple to calculate, but the inverse (F*^) cannot viably be 
determined. This is understood to mean that in practice 
it Is extremely unlikely that a value p^.-, may be deter- 
mined from a value p,^. Such a one-way function, known 
per se from cryptography, may be constructed, e.g., by 
involution modulo a certain number, in which that spe- 
cific number may be a so-called "Blum Integer", i.e. a 
product of two large prime numbers In a special form. A 
so-called "hash" function may also be applied. 
[0032] In Fig. 4, the application of the one-way func- 
tion Is further Illustrated with reference to an example. 
In this example, M is equal to 5 (see also Fig. 3), so that 
the first payment value is Pg. In practice, M will have a 
much greater value, e.g., 255. 

[0033] A value pj (1=0.. .5) may simply be calculated 
from the value pj.-, by applying the one-way (unction F: 
F(Pl-i)=^Pi' Conversely, it is very difficult to determine the 
Inverse of F, so that in practice it is not viable to deter- 
mine the value P|.^ from p-,. In the method according to 
the invention, this provides a form of guarantee: the pay- 
ment station is able to check whether the value p,- is cor- 
rect and what is the (relative) value thereof by applying 
the function F several times. Conversely, the payment 
station Itself is not able to calculate the next payment 
value, which represents a greater number of payment 
units. 

[0034] As may be seen from Fig. 4, the value P5 may 
be obtained from P2 by applying the function F three 
times. If the payment station first receives P5 and then 
P2. it may therefore be determined that Pg is the fourth 
payment value (relative to P5) and. e.g., represents four 
payment units (i.e. the units associated with P5 plus P4 
plus P3 plus P2), In response thereto, e.g., a count value 
N-4 may be transferred to the payment means in order 
to debit four payment units at once. If no value P5 results 
after the function F has been applied at most M (In this 
case 5) times to pg. it may be concluded that the most 
recently received value (i.e. P2) is invalid, as the values 
p5 and P2 are apparently not related by F. 
[0035] The possession of a valid P2 therefore demon- 
strates that the receiver (the payment station) is entitled 
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to payment units corresponding to four payment values: 
P2 through P5. These may be four payment units but, e. 
g., also four times C payment units, where C is a con- 
version factor. 

[0036] As explained above, the use of a one-way 

function provides a simple and rapid method for effect- 
ing payments with a variable number of payment units. 
This may not only be advantageous in the case of te- 
lephony, but for example also In the case of vending ma- 
chines, taximeters, and other devices where the amount 
to be settled can be dependent on the time duration. 
[0037] The payment values issued need not be set- 
tled, for example by means of debit values, during or 
immediately aftenwards a transaction with a payment 
means, but may be used as proof in a settlement proc- 
ess to be carried out at a later time. In this case a pay- 
ment is laid down with the issued payment means, while 
the settlement of the payment can take place at a later 
time (incontestable charging). Such a settlement may 
for example result in a summary invoice with several 
transactions being settled in one settlement process. 
Using payment values as proof for settlements after- 
wards, can for example be used with mobile telephone 
and video distribution services (video-on-demand). 
[0038] The invention may be applied with or without 
so-called electronic 'cheques" comprising an electronic 
"signature" (e.g., a cryptographic operation with a spe- 
cific key on certain data) of the bank and/or the user. 
[0039] It will be understood by those skilled in the art 
that the invention is not limited to the embodiments 
shown, and that many modifications and amendments 
are possible without departing from the scope of the in- 
vention as defined in the appended claims. 



Clalme 

1 . Method for effecting a payment transaction with an 
electronic payment means (1,1) and a payment sta- 
tion (II), comprising the issuing by the payment 
means to the payment station of at least a first pay- 
ment value (Piyi), payment values being represent- 
ative for one or more payment units to be settled, 
characterised in that each subsequent payment val- 
ue (Pf^^.1 , ...) is related to the first payment val- 
ue (Pn^) by a one-way function (F) in such a manner 
that the first payment value (P^^) may be obtained 
from a further payment value (pjy^.jj) by repeatedly 
applying the function (F). 

2. Method according to claim 1 , wherein the payment 
station (II), after receipt of a payment value (P|), 
checks by applying the function (F) whether the 
payment value received Is correct. 

3. Method according to claim 1 or 2, wherein the pay- 
ment station (II), after receipt of a payment value 
(pj), detemnines by applying the function (F) how 



many payment units the payment value received 
represents. 

4. Method according to any of the preceding claims, 
5 wherein authentication data (A) is transferred to- 
gether with at least the first payment value (P^^) f rom 
the payment means (I) to the payment station (II). 

5. Method according to any of the preceding claims, 
10 wherein the payment station (II), after receipt of a 

payment value (Pj), transfers a debit value (R) to the 
payment means. 

6. Method according to claim 5, wherein debit values 
'5 (R) are used, directly after receipt by the payment 

means (I), for debiting a balance. 

7. Method according to claim 5, wherein debit values 
(R), after receipt by the payment means (I)', are col- 

20 lected and, at the end of the payment transaction, 
are used for debiting a balance. 

8. Method according to any of the claims 5 up to and 
Including 7, wherein a count value (N) is transferred. 

2S together with the debit value (R), from the payment 
station (II) to the payment means (I), which count 
value (N) represents the number of payment units 
to be debited. 

30 9. Method according to claim 8, wherein the count val- 
ue (N) is related to the number of times the one-way 
function (F) has been applied. 

10. Method according to claim 8. wherein the count val- 
3S ue (N) anrwunts to one. 

11. Method according to any of the claims 1 up to and 
including 4, wherein the payment values (pj) Issued 
are used as proof in a settlement process to be car- 

40 ried out later. 

12. Payment means (1, I) provided with an integrated 
circuit (10). such as a so-called smart card, the in- 
tegrated circuit (10) being arranged for effecting a 

45 payment transaction with a payment station (11) by 
issuing to the payment station (II) at least a first pay- 
ment value (p)^), payment values being represent- 
ative for one or more payment units to be settled, 
characterised in that each subsequent payment val- 
so ue(Pfy,,i, pjy|.2, ...) is related to the first payment val- 
ue (P[^^) by a one-way function (F) in such a manner 
that the first payment value (p^) may be obtained 
from a further payment value (P^.^) by repeatedly 
applying the function (F). 

ss 

13. Payment means according to claim 12, further ar- 
ranged for transferring, together with at least the 
first payment value (p^^), authentication data (A) to 
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the payment station (II). 

14. Payment means according to claim 12 or 13, further 
arranged for receiving and collecting debit and/or ' 
count values (R, N) from the payment station (II) s 
and for debiting a balance at the end of the payment 
transaction with an amount represented by said val- 
ues (R. N). 



PatentansprOche 

1. Verfahren zum Durchfuhren einer Zahlungstrans- 
aktion mit einem elektronischen Zahlungsmittel (1, 

I) und mit etner Zahlungsstation (II), mit der Ausga- ts 
be von mindestens einem ersten Zahlungswert (P|^) 
von dem Zahlungsmittel an die Zahlungsstation, 
wobei Zahlungswerte reprasentativ fur eine oder 
mehrere zu bezahlende Zahlungselnheiten sind, 
dadurch gekennzelchnet, dass jeder nachtolgen- so 
de Zahlungswert p^^.2) mit dem ersten Zah- 
lungswert durch eine Ein-Weg-Funktion (F) in solch 
einer Weise verbunden ist, dass der erste Zah- 
lungswert (P^) aus einem welteren Zahlungswert 
(Pm-x) durch wiederholtes Anwenden der Funktlon 2S 
(F) erhalten werden kann. 

2. Verfahren nach Anspruch 1 , dadurch gekennzelch- 
net. dass die Zahlungsstation (II) nach Empfang el- 
nes Zahlungswertes (13|) durch Anwenden der Funk- 30 
tion (F) uberpruft, ob der empfangene Zahlungs- 
wert richtig Ist. 

3. Verfahren nach Anspruch 1 oder Anspruch 2, da- 
durch gekennzelchnet, dass die Zahlungsstation 3S 
(II) nach Empfang eines Zahlungswertes (Pj) durch 
Anwenden der Funktlon (F) feststellt, wie viele Zah- 
lungselnheiten der empfangene Zahlungswert dar- 
stellt. 

40 

4. Verfahren nach einem der vorstehenden Anspru- 
che, dadurch gekennzelchnet. dass Authentifizle- 
rungsdaten (A) zusammen mit mindestens dem er- 
sten Zahlungswert (Pj^) von dem Zahlungsmittel (I) 

an die Zahlungsstation (II) Qbertragen werden. 4S 

5. Verfahren nach einem der vorstehenden AnsprO- 
che, dadurch gekennzelchnet. dass die Zahlungs- 
station (II) nach Empfang eines Zahlungswertes (Pj) 
einen Belastungswert (R) an das Zahlungsmittel so 

ubermittelt. 

6. Verfahren nach Anspruch 5, dadurch gekennzelch- 
net, dass Belastungswerte (R) direkt nach dem 
Empfang durch das Zahlungsmittel (I) zur Bela- ss 
stung eines Guthabens eingesetzt werden. 

7. Verfahren nach Anspruch 5, dadurch gekennzelch- 



net, dass Belastungswerte (R) nach dem Empfang 
durch das Zahlungsmittel (1) gesammelt werden 
und bei der Beendigung der Zahlungstransaktion 
zur Belastung eines Guthabens eingesetzt werden. 

8. Verfahren nach einem der Anspruche 5 bis 7.. da- 
durch gekennzelchnet, dass zusammen mit dem 
Belastungswert (R) ein Zahlwert (N) von der Zah- 
lungsstation (II) an das Zahlungsmittel (I) Qbertra- 
gen wird. wobei der Zahlwert (N) die Anzahl der zu 
belastenden Zahlungselnheiten darstellt. 

9. Verfahren nach Anspruch 8, dadurch gekennzelch- 
net, dass der Zahlwert (N) zur Anzahl der Anwen- 
dungen der Ein-Weg-Funktion (F) in Bezug steht. 

10. Verfahren nach Anspruch 8, dadurch gekennzelch- 
net. dass der Zahlwert (N) EIns ist. 

11. Verfahren nach einem der Anspruche 1 bis 4, da- 
durch gekennzelchnet, dass die ausgegebenen 
Zahlungswerte (Pj) als Beweis fur ein nachfolgend 
auszufuhrendes Bezahlungsvertahren eingesetzt 

werden. 

12. Zahlungsmittel (1, I) mit einem integrierten Schalt- 
kreis (10), wie eine sogenannte Smartcard, wobei 
der Integrierte Schaltkreis (10) derart ausgestaltet 
ist. um eine Zahlungstransaktion mit einer Zah- 
lungsstation (II) durchzufuhren. indem mindestens 
ein erster Zahlungswert (p^) an die Zahlungsstation 
ausgegeben wIrd, wobei Zahlungswerte reprasen- 
tativ fur eine oder mehrere zu bezahlende Zah- 
lungselnheiten sind, dadurch gekennzelchnet, 
dass jeder nachfolgende Zahlungswert (P^..,, 
3^-2. •• ) mit dem ersten Zahlungswert (P^^) durch 
eine Ein-Weg-Funktion (F) in solch einer Weise ver- 
bunden ist, dass der erste Zahlungswert (P,^) aus 
einem welteren Zahlungswert (8,^.jj) durch wieder- 
holtes Anwenden der Funktlon (F) erhalten werden 
kann. 

13. Zahlungsmittel nach Anspruch 12. dadurch ge- 
kennzeichnet, dass es so ausgestaltet ist, um Au- 
thentifizierungsdaten (A) zusammen mit minde- 
stens dem ersten Zahlungswert (P^^) an die Zah- 
lungsstation (II) zu Qbertragen. 

1 4. Zahlungsmittel nach Anspruch 1 2 oder 1 3, dadurch 
gekennzelchnet, dass es weiterhin ausgestaltet ist, 
um Belastungswerte und/oderZahlwerte (R. N) von 
der Zahlungsstation zu ubermittein und umein Gut- 
haben am Ende der Zahlungstransaktion mit der 
durch die genannten Werte (R. N) reprasentlerten 
Geldwerte zu belasten. 
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Revendicatlona 

1. Proc6d6 d'execution d'une transaction de palement 
avec un moyen ^iectronique de paiement (1. I) ^ 
une station de paiement (II), comprenant la d^li- 
vrance par le moyen de paiement k la station de 
paiement d'au moins une premiere valeur de paie- 
ment (p(^), les valeurs de paiement 6tant represen- 
tatives d'une ou plusteurs unites de paiement d rd- 
gler. caractdrisd en ce que chaque valeur ultdrleure 
de paiement (P^.^, p^.g. est \\6e k la premiere 
valeur de paiement (P,^) par une fonction univoque 
(F) de maniere que la premiere valeur de paiement 
(Pi^) puisse dtre obtenue k partir d'une valeur sup- 
ptdmentaire de paiement (Pi^.^) par application rd- 
pet6e de la fonction (F). 

2. Proc6d6 selon la revendication 1. dans lequel la 
station de paiement (II), apr^s reception d'une va- 
leur de paiement (Pj), v6rifie, par application de la 
fonction (F). si la valeur de paiement re9ue est con- 
venable. 

3. Proc6d6 selon la revendication 1 ou 2, dans lequel 
la station de paiement (il), apr6s reception d'une va- 
leur de paiement (P;), determine, par application de 
la fonction (F), combien d'unit^s de paiement repr6- 
sente la valeur de paiement re^ue. 

4. Proc6d6 selon I'une quelconque des revendicatlons 
pr^c^dentes, dans lequel des donndes d'authentl- 
ficatlon (A) sont transfdrdes avec au moins une pre- 
miere valeur de paiement (P^^) k partir du moyen de 
paiement (I) k la station de paiement (II). 

5. Procddd selon Tune quelconque des revendicatlons 
prdc6dentes. dans lequel la station de paiement (II), 
aprds reception d'une valeur de paiement (p;), 
transfers une valeur de ddbit (R) au moyen de paie- 
ment. 



9. Proc6d6 selon la revendication 8, dans lequel la va- 
leur de comptage (N) est ii^e au nombre de fols ou 
la fonction univoque (F) a appliquee. 

5 10. Proc6d6 selon la revendication 8. dans lequel la va- 
leur de comptage (N) est Sgale k 1 . 

11. Proc6dd selon I'une quelconque des revendicatlons 
1 k 4 incluse, dans lequel les valeurs de paiement 

10 (Pj) qui sont d6llvr6es sont utillsdes comme preuve 
d'une operation de r6glement ex6cut6e ult6rleure- 

ment. 

12. Moyen de paiement (1. I) muni d'un circuit int6gr6 
^5 (10), tei qu'une carte 6lectronique, le circuit int^grd 

(10) etant destin6 k effectuer une transaction de 
paiement avec une station de paiement (II) par 66- 
livrance k la station de paiement (II) d'au moins une 
premiere valeur de paiement (Pi^^), les valeurs de 
20 paiement 6tant representatives d'une ou plusieurs 
unites de paiement a r6gler, caracterise en ce que 
cliaque valeur ult^rieure de paiemenl (pj^.^: 
Pm-2' •") ®st li^e k la premiere valeur de paiement 
(p,;^) par une fonction univoque (F) de manifere que 
2S la premifere valeur de paiement (P^) puisse Sire ob- 
tenue k partir d'une valeur supplementaire de paie- 
fnent (p^fl.^) par application repet6e de la fonction 
(F). 

30 13. Moyen de paiement selon la revendication 1 2. des- 
tine en outre k transferer, avec au moins la premiere 
valeur de paiement (P^), des donn6es d'authentifi- 
cation (A) k la station de paiement (II). 

3S 14. Moyen de paiement selon la revendication 12 ou 
13, destine en outre k recevoir at collecter des va- 
leurs de debit et/ou de comptage (R, N) provenant 
de la station de paiement (II) et k d^biter un solde 
k la fin de la transaction de paiement avec une som- 

<o me representee par les valeurs R. N. 
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6. Procede selon la revendication 5, dans lequel les 
valeurs de debit (A) sont ut(lls6es directement apr^s 
reception par le moyen de paiement (I) pour le debit 
d'un solde. 4S 

7. Precede selon la revendication 6, dans lequel les 
valeurs de debit (R), apres reception par le moyen ■ 
de paiement (I), sont coilectees et, k la fin de la tran- 
saction de paiement. sont utillsees pour le debit so 

d'un solde. 



8. Precede selon I'une quelconque des revendicatlons 
5^7 incluse, dans lequel une valeur de comptage 
(N) est transferee avec la valeur de debit (R) depuis ss 
la station de paiement (II) au moyen de paiement 
(I), cette valeur de comptage (N) representant le 
nombre d'unites de paiement k debitor. 
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